make session lifetime customizable